.      How to articles       Windows Services       Group Policy             Donate        
Computer step by step

How to Start/Stop IKE and AuthIP IPsec Keying Modules

Service name: IKEEXT

Display name: IKE and AuthIP IPsec Keying Modules


Description:

The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying
modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will
disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or
disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the
IKEEXT service running.


Path to executable:

C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p

CMD:
This method shows you how to Start/Stop IKE and AuthIP IPsec Keying Modules service from Command Prompt

Perform the following steps:

Please go to Start and click on the Type here to search

Type cmd, right click on cmd icon under the Programs and click on Run as administrator

Services Regedit CMD Msconfig

Please confirm User Account Control pop-up

Please select, right and copy a registry key from below, then right click on command prompt window, select Paste and press Enter


To Start IKE and AuthIP IPsec Keying Modules service:

net start IKEEXT

sc start IKEEXT


Note: You can’t start a service if Startup type is on Disabled.


To Stop IKE and AuthIP IPsec Keying Modules service:

net stop IKEEXT

sc stop IKEEXT


To change Startup type:

Automatic:

REG add "HKLM\SYSTEM\CurrentControlSet\PerfHost\IKEEXT" /v Start /t REG_DWORD /d 2 /f

sc config IKEEXT start= auto

Manual:

REG add "HKLM\SYSTEM\CurrentControlSet\services\IKEEXT" /v Start /t REG_DWORD /d 3 /f

sc config IKEEXT start= demand

Disabled:

REG add "HKLM\SYSTEM\CurrentControlSet\services\IKEEXT" /v Start /t REG_DWORD /d 4 /f

sc config IKEEXT start= disabled

Automatic (Delayed Start):

REG add "HKLM\SYSTEM\CurrentControlSet\services\IKEEXT" /v Start /t REG_DWORD /d 2 /f

sc config IKEEXT start= delayed-auto


Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.

REG add "HKLM\SYSTEM\CurrentControlSet\services\IKEEXT" /v DelayedAutostart /t REG_DWORD /d 1 /f


When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.

REG add "HKLM\SYSTEM\CurrentControlSet\services\IKEEXT" /v DelayedAutostart /t REG_DWORD /d 0 /f